Hi, there. Running on Ubuntu Bionic (i.e. 18.04.2 LTS), rsyslogd version 8.32.0-1ubuntu4.
I am using the omfwd module to forward messages using TCP as my protocol. My configuration line for forwarding the logs from my client (i.e. 192.168.56.10) to a remote host (192.168.56.20) is as follows: *.* action(type="omfwd" Target="192.168.56.20" Port="6514" Protocol="tcp" Action.ResumeInterval="5" Action.ResumeRetryCount="1") When I do this, and the recipient process at 192.168.56.20 is not running, I see that the Action.ResumeInterval is causing it to retry connected every 5 seconds. This is good and what I want. However, what isn't working in this scenario is that it is sending dozens of reconnection requests at every interval. I use tcpdump to see the SYN and ACK activity and see stuff like this: # tcpdump -n -i any host 192.168.56.10 and port 6514 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on any, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes 15:50:27.365974 IP 192.168.56.10.49138 > 192.168.56.20.6514: Flags [S], seq 3476559785, win 27759, options [mss 1461,sackOK,TS val 3852457951 ecr 0,nop,wscale 7], length 0 15:50:27.366003 IP 192.168.56.20.6514 > 192.168.56.10.49138: Flags [R.], seq 0, ack 3476559786, win 0, length 0 15:50:27.375716 IP 192.168.56.10.49142 > 192.168.56.20.6514: Flags [S], seq 2796129455, win 27759, options [mss 1461,sackOK,TS val 3852457960 ecr 0,nop,wscale 7], length 0 15:50:27.375737 IP 192.168.56.20.6514 > 192.168.56.10.49142: Flags [R.], seq 0, ack 2796129456, win 0, length 0 15:50:27.377483 IP 192.168.56.10.49146 > 192.168.56.20.6514: Flags [S], seq 2080712016, win 27759, options [mss 1461,sackOK,TS val 3852457962 ecr 0,nop,wscale 7], length 0 15:50:27.377505 IP 192.168.56.20.6514 > 192.168.56.10.49146: Flags [R.], seq 0, ack 2080712017, win 0, length 0 15:50:27.380441 IP 192.168.56.10.49150 > 192.168.56.20.6514: Flags [S], seq 1146365104, win 27759, options [mss 1461,sackOK,TS val 3852457965 ecr 0,nop,wscale 7], length 0 15:50:27.380465 IP 192.168.56.20.6514 > 192.168.56.10.49150: Flags [R.], seq 0, ack 1146365105, win 0, length 0 15:50:27.382348 IP 192.168.56.10.49154 > 192.168.56.20.6514: Flags [S], seq 3734368934, win 27759, options [mss 1461,sackOK,TS val 3852457967 ecr 0,nop,wscale 7], length 0 15:50:27.382371 IP 192.168.56.20.6514 > 192.168.56.10.49154: Flags [R.], seq 0, ack 3734368935, win 0, length 0 15:50:27.396278 IP 192.168.56.10.49158 > 192.168.56.20.6514: Flags [S], seq 2386180141, win 27759, options [mss 1461,sackOK,TS val 3852457981 ecr 0,nop,wscale 7], length 0 15:50:27.396320 IP 192.168.56.20.6514 > 192.168.56.10.49158: Flags [R.], seq 0, ack 2386180142, win 0, length 0 15:50:27.397594 IP 192.168.56.10.49162 > 192.168.56.20.6514: Flags [S], seq 3647088588, win 27759, options [mss 1461,sackOK,TS val 3852457982 ecr 0,nop,wscale 7], length 0 15:50:27.397650 IP 192.168.56.20.6514 > 192.168.56.10.49162: Flags [R.], seq 0, ack 3647088589, win 0, length 0 15:50:27.399090 IP 192.168.56.10.49166 > 192.168.56.20.6514: Flags [S], seq 3703754544, win 27759, options [mss 1461,sackOK,TS val 3852457984 ecr 0,nop,wscale 7], length 0 15:50:27.399113 IP 192.168.56.20.6514 > 192.168.56.10.49166: Flags [R.], seq 0, ack 3703754545, win 0, length 0 15:50:27.400851 IP 192.168.56.10.49170 > 192.168.56.20.6514: Flags [S], seq 3785179705, win 27759, options [mss 1461,sackOK,TS val 3852457986 ecr 0,nop,wscale 7], length 0 15:50:27.400876 IP 192.168.56.20.6514 > 192.168.56.10.49170: Flags [R.], seq 0, ack 3785179706, win 0, length 0 Am I misunderstanding the meaning of ResumeRetryCount correctly? Is there a way to limit the number of reconnect attempts to the number I want (i.e. one connection attempt every 5 seconds)? Thanks in advance. RL _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
